Path-ping and ecmp-traceroute for ipv6 overlay virtualized networks

ABSTRACT

In one embodiment, an ingress network virtualization edge (NVE) in a computer network generates an echo packet, and sets an indication in the echo packet that the echo packet is for overlay path validation. In addition, the ingress NVE sets a message type of the echo packet to a generic echo request, and includes virtualization network (VN) context information within the echo packet. Once setting a destination address of the echo packet as an egress NVE address and including an indication to the egress NVE that the echo packet is an operations, administration, and management (OAM) message, the ingress NVE may then send the echo packet toward the egress NVE (e.g., to validate the VN context information and/or to reveal multipath traces).

TECHNICAL FIELD

The present disclosure relates generally to computer networks, and, moreparticularly, to path-ping and equal cost multipath (ECMP) traceroutefor Internet Protocol version 6 (IPv6) overlay virtualized networks.

BACKGROUND

Network Virtualization is an emerging technology in the market. Forinstance, advances regarding Network Virtualization over Layer 3 (NVO3)have been made recently, such as proposing to use plain IPv4 and IPv6encapsulation as an overlay tunnel. For example, one internet draftproposed to the Internet Engineering Task Force (IETF) entitled “NVO3Data Plane Requirements”<draft-ietf-nvo3-dataplane-requirements>, byBitar et al. (December 2012), describes underlay tunneling requirements,which, from an encapsulation perspective, must support IPv4 or IPv6(both should be supported), while multiprotocol label switching (MPLS)tunneling may be supported. In addition, this same draft states thatoperations, administration, and management (OAM) tools used in a networkvirtualization (NV) topology must reveal the set of equal cost multipath(ECMP) paths used by NVO3 encapsulated packets in the underlying networkfrom an ingress NV edge (NVE) to egress NVE (particularly when the coreis non-MPLS), and to validate the L2 and L3 VN Context ID between NVEsfor consistency. However, such tools have yet to be defined.

BRIEF DESCRIPTION OF THE DRAWINGS

The embodiments herein may be better understood by referring to thefollowing description in conjunction with the accompanying drawings inwhich like reference numerals indicate identically or functionallysimilar elements, of which:

FIG. 1 illustrates an example computer network;

FIG. 2 illustrates an example network device/node;

FIG. 3 illustrates an example simplified echo packet format;

FIG. 4 illustrates an example of path-ping for IPv6 overlay virtualizednetworks;

FIG. 5 illustrates an example simplified procedure for path-ping forIPv6 overlay virtualized networks;

FIG. 6 illustrates an example of ECMP-traceroute for IPv6 overlayvirtualized networks;

FIG. 7 illustrates an example simplified procedure for ECMP-traceroutefor IPv6 overlay virtualized networks; and

FIG. 8 illustrates an example simplified procedure for path-ping andECMP-traceroute for IPv6 overlay virtualized networks.

DESCRIPTION OF EXAMPLE EMBODIMENTS Overview

According to one or more embodiments of the disclosure, an ingressnetwork virtualization edge (NVE) in a computer network generates anecho packet, and sets an indication in the echo packet that the echopacket is for overlay path validation. In addition, the ingress NVE setsa message type of the echo packet to a generic echo request, andincludes virtualization network (VN) context information within the echopacket. Once setting a destination address of the echo packet as anegress NVE address and including an indication to the egress NVE thatthe echo packet is an operations, administration, and management (OAM)message, the ingress NVE may then send the echo packet toward the egressNVE. In one embodiment, sending the echo packet toward the egress NVEcauses the egress NVE to send an echo reply to the ingress NVE accordingto validation of the VN context information. In another embodiment, theingress NVE includes multipath information within the echo packet tocause each intermediate multipath receiver to reply with a respectiveflow label and mask for each egress interface of that multipathreceiver, and sending the echo packet toward the egress NVE comprisessending a plurality of echo packets with incrementally increasing hoplimits.

DESCRIPTION

A computer network is a geographically distributed collection of nodesinterconnected by communication links and segments for transporting databetween end nodes, such as personal computers and workstations. Manytypes of networks are available, with the types ranging from local areanetworks (LANs) to wide area networks (WANs). LANs typically connect thenodes over dedicated private communications links located in the samegeneral physical location, such as a building or campus. WANs, on theother hand, typically connect geographically dispersed nodes overlong-distance communications links, such as common carrier telephonelines, optical lightpaths, synchronous optical networks (SONET), orsynchronous digital hierarchy (SDH) links. The Internet is an example ofa WAN that connects disparate networks throughout the world, providingglobal communication between nodes on various networks. The nodestypically communicate over the network by exchanging discrete frames orpackets of data according to predefined protocols, such as theTransmission Control Protocol/Internet Protocol (TCP/IP). In thiscontext, a protocol consists of a set of rules defining how the nodesinteract with each other. Computer networks may be furtherinterconnected by an intermediate network node, such as a router, toextend the effective “size” of each network.

Since management of interconnected computer networks can proveburdensome, smaller groups of computer networks may be maintained asrouting domains or autonomous systems. The networks within an autonomoussystem (AS) are typically coupled together by conventional “intradomain”routers configured to execute intradomain routing protocols, and aregenerally subject to a common authority. To improve routing scalability,a service provider (e.g., an ISP) may divide an AS into multiple “areas”or “levels.” It may be desirable, however, to increase the number ofnodes capable of exchanging data; in this case, interdomain routersexecuting interdomain routing protocols are used to interconnect nodesof the various ASes. Moreover, it may be desirable to interconnectvarious ASes that operate under different administrative domains. Asused herein, an AS, area, or level is generally referred to as a“domain.”

FIG. 1 is a schematic block diagram of an example computer network 100illustratively comprising nodes/devices, such as a plurality of routers110 (e.g., “NVE1”, R1-R4, and “NVE2”) interconnected by links 115, asshown. As used herein, links may be labeled by their correspondingendpoints, such as the link between nodes R1 and R2 being referred toherein as “link R1-R2” (or equally “link R2-R1”). Those skilled in theart will understand that any number of nodes, devices, links, etc. maybe used in the computer network, and that the view shown herein is forsimplicity. Those skilled in the art will also understand that while theembodiments described herein is described generally, it may apply to anynetwork configuration within an Autonomous System (AS) or area, orthroughout multiple ASes or areas, etc.

Data packets 140 (e.g., traffic/messages) may be exchanged among thenodes/devices 110 of the computer network 100 over links 115 usingpredefined network communication protocols such as the TransmissionControl Protocol/Internet Protocol (TCP/IP), User Datagram Protocol(UDP), Asynchronous Transfer Mode (ATM) protocol, Frame Relay protocol,Internet Packet Exchange (IPX) protocol, etc.

FIG. 2 is a schematic block diagram of an example node/device 200 thatmay be used with one or more embodiments described herein, e.g., as anNVE (e.g., ingress NVE). The device comprises a plurality of networkinterfaces 210, one or more processors 220, and a memory 240interconnected by a system bus 250. The network interfaces 210 containthe mechanical, electrical, and signaling circuitry for communicatingdata over physical links coupled to the network 100. The networkinterfaces may be configured to transmit and/or receive data using avariety of different communication protocols, including, inter alia,TCP/IP, UDP, ATM, synchronous optical networks (SONET), wirelessprotocols, Frame Relay, Ethernet, Fiber Distributed Data Interface(FDDI), etc. Notably, a physical network interface 210 may also be usedto implement one or more virtual network interfaces, such as for VirtualPrivate Network (VPN) access, known to those skilled in the art.

The memory 240 comprises a plurality of storage locations that areaddressable by the processor(s) 220 and the network interfaces 210 forstoring software programs and data structures associated with theembodiments described herein. The processor 220 may comprise necessaryelements or logic adapted to execute the software programs andmanipulate the data structures 245. An operating system 242 (e.g., theInternetworking Operating System, or IOS®, of Cisco Systems, Inc.),portions of which are typically resident in memory 240 and executed bythe processor(s), functionally organizes the node by, inter alia,invoking network operations in support of software processes and/orservices executing on the device. These software processes and/orservices may comprise routing services 244 and an overlay process 246that may, for example, facilitate the operation of network overlayprotocols as described herein. Additionally, these software processesand/or services may further comprise an “overlay ping” process 248, asdescribed herein, which may alternatively be located within individualnetwork interfaces (e.g., process 248 a).

It will be apparent to those skilled in the art that other processor andmemory types, including various computer-readable media, may be used tostore and execute program instructions pertaining to the techniquesdescribed herein. Also, while the description illustrates variousprocesses, it is expressly contemplated that various processes may beembodied as modules configured to operate in accordance with thetechniques herein (e.g., according to the functionality of a similarprocess). Further, while processes may be shown and/or describedseparately, those skilled in the art will appreciate that processes maybe routines or modules within other processes.

Routing process/services 244 contain computer executable instructionsexecuted by processor 220 to perform functions provided by one or morerouting protocols, such as the Interior Gateway Protocol (IGP) (e.g.,Open Shortest Path First, “OSPF,” andIntermediate-System-to-Intermediate-System, “IS-IS”), the Border GatewayProtocol (BGP), etc., as will be understood by those skilled in the art.These functions may be configured to manage a forwarding informationdatabase (not shown) containing, e.g., data used to make forwardingdecisions. In particular, changes in the network topology may becommunicated among routers 200 using routing protocols, such as theconventional OSPF and IS-IS link-state protocols (e.g., to “converge” toan identical view of the network topology). Notably, routing services244 may also perform functions related to virtual routing protocols,such as maintaining VRF instances (not shown), or tunneling protocols,such as for Multi-Protocol Label Switching (MPLS), generalized MPLS(GMPLS), etc., each as will be understood by those skilled in the art.

Overlay process 246 contains computer executable instructions executedby processor 220 to perform functions provided by one or moreoverlay-based protocols, such as Network Virtualization over Layer 3(NVO3). In particular, as noted above, Network Virtualization is anemerging technology in the market. An overlay network, as will beunderstood by those skilled in the art, is a computer network which isbuilt on the top of another network, where nodes in the overlay can bethought of as being connected by virtual or logical links, each of whichcorresponds to a path, perhaps through many physical links, in theunderlying network. For example, distributed systems such as cloudcomputing, peer-to-peer networks, and client-server applications areoverlay networks because their nodes run on top of the Internet.Illustratively, FIG. 1 may represent a simplified overlay topology(e.g., an NVO3 over IPv6 topology), where network virtualization edge(NVE) devices NVE1 and NVE2 provide ingress and egress to thevirtualized network. That is, R1-R4 are nodes as part of an IP or MPLSoverlay network that connects NVE1 and NVE2 which acts as edge nodesthat provide an L2 or L3 virtualized network.

As also noted above, advances regarding NVO3 have been made recently,such as proposing to use plain IPv4 and IPv6 encapsulation as an overlaytunnel. For example, one internet draft proposed to the InternetEngineering Task Force (IETF) entitled “NVO3 Data PlaneRequirements”<draft-ietf-nvo3-dataplane-requirements>, by Bitar et al.(December 2012), describes underlay tunneling requirements, which, froman encapsulation perspective, must support IPv4 or IPv6 (both should besupported), while multiprotocol label switching (MPLS) tunneling may besupported. In addition, this same draft states that operations,administration, and management (OAM) tools used in a networkvirtualization (NV) topology must reveal the set of equal cost multipath(ECMP) paths used by NVO3 encapsulated packets in the underlying networkfrom an ingress NV edge (NVE) to egress NVE (particularly when the coreis non-MPLS), and to validate the L2 and L3 VN Context ID between NVEsfor consistency. However, such tools have yet to be defined. Inparticular, the Internet Control Management Protocol (ICMP) “ping”messages are not suitable for ECMP paths, since the hashing algorithmused by multipath branching devices may result in different pathselection for different flows. Brute force techniques to use an ICMPping (e.g., attempting all combinations of source address/port,destination address/port, etc.) are cumbersome and overly taxing on thenetwork.

Path-Ping and ECMP-Traceroute

The techniques herein provide VN Context validation on an IPv6 core(e.g., non-MPLS NVO3, as well as ECMP tree trace (revealing all ECMPsbetween NVEs). In general, the intentions for this OAM is that an egressnode should differentiate NVO3 dataplane traffic and NVO3 OAM packets,and NVO3 OAM packet payloads should carry VN Context IDs and associateddetails that egress NVEs can use for validation. To accomplish this, thetechniques herein propose a scheme similar to MPLS LSP Ping (asdescribed in the IETF Request for Comment (RFC) 4379, entitled“Detecting Multi-Protocol Label Switched (MPLS) Data Plane Failures”) byrepurposing and extending MPLS LSP Ping machinery to functionappropriately on a “plain” IPv6 network as described below.

In particular, as detailed below, a new packet format to validate NVO3overlay paths is defined that expands LSP Ping in a manner that providesthe desired outcome in (non-MPLS) overlay networks (e.g., but thatre-uses the same user datagram protocol (UDP) port). For instance, theIPv6 destination of an echo request packet is set as the egress NVEaddress, and a new IPv6 Destination Header Option (or other mechanism)is defined to indicate that this packet is an OAM message. Moreover, anew flag (e.g., in a “Global Flags” field) may be set to signal the OAMpayload for NVO3 overlay validation (i.e., to differentiate between LSPPing and non-LSP Ping), where generic echo request/reply types may bedefined. The OAM payload may be populated by new fields (e.g.,TLVs/sub-TLVs (type-length-value fields) that identify the VN Context IDto be validated by egress NVE or other needs. Lastly, as describedbelow, a downstream detailed mapping (DDMAP) format may be re-used(e.g., from RFC6424, entitled “Mechanism for Performing Label SwitchedPath Ping (LSP Ping) over MPLS Tunnels”), while introducing a newMultipath Data Type (e.g., for “IPv6 Flow Label”).

Illustratively, the techniques described herein may be performed byhardware, software, and/or firmware, such as in accordance with the“overlay ping” process 248/248 a, which may contain computer executableinstructions executed by the processor 220 (or independent processor ofinterfaces 210) to perform functions relating to the techniquesdescribed herein, e.g., in conjunction with routing process 244 and/oroverlay process 246. For example, the techniques herein may be treatedas extensions to conventional protocols, and as such, may be processedby similar components understood in the art that execute thoseprotocols, accordingly.

Operationally, an “overlay ping” generic behavior is prompted at aningress NVE (e.g., NVE1) and comprises generating an echo packet, suchas shown in FIG. 3. In particular, in the illustrative example packetformat, a packet header 310 indicates a source 311 and destination 312of the packet, but may also include a new bit (e.g., in a global flagsfield 314) that can be used to signal that this echo packet is tovalidate a non-MPLS (NVO3 overlay) path (that is, an indication that theecho packet is for overlay path validation). In addition, two newmessage types (field 316) are defined for requests and replies tovalidate NVO3 paths, such as a generic echo request (e.g., Value X) anda generic echo reply (e.g., Value Y). Also, for use with ECMP traceroute(described below), a hop count (or time-to-live, TTL) field 318 may alsobe present within the header 310. Notably, where a format similar to theMPLS LSP Ping is used, certain other fields may remain without change,such as a Reply Mode, Sender's Handle, Sequence Number, TimeStampSent/Received, etc., as will be understood by those skilled in the art.

The payload 320 of the echo packet 300 may comprise one or more newTLVs/Sub-TLVs or other fields that can be used to validate the VNContext Identification, that is, fields that include virtualizationnetwork (VN) context information 322 within the echo packet (e.g., theVN context identifier (ID) and associated VN context details). Moreover,the packet 300 may also include an indication 324 (to the egress NVE)that the packet is an OAM message. In one embodiment, the indicationcomprises a specific user datagram protocol (UDP) port and destinationport, such that the egress NVE may inspect those fields to determine theOAM intention. Alternatively, an explicit indication may be used, suchas a new IPv6 Destination Header Option as OAM-OPTION to carry a flagstating that the packet 300 is an OAM packet. (Note that while the OAMindication field 324 is shown in the payload 320, the field may actuallybe located within the header 310, and the view shown herein is merely anexample implementation.)

As a first example use, FIG. 4 illustrates an example VN Context IDvalidation, where the ingress NVE (e.g., NVE1) can send an echo request410 (a packet 300), and may receive an echo reply 420 from the egressNVE (e.g., NVE2), accordingly. When triggered from the initiator NVE inthis instance, the techniques may generally be described with referenceto procedure 500 as shown in FIG. 5. In particular, the procedure startsin step 505, and continues to step 510 where the ingress NVE sets thesource address 311 of the echo packet as its own address in the IPv6Header 310. In step 515, the destination 312 is set as the target egressaddress (e.g., NVE2), while an OAM-OPTION Destination Header Option maybe included in step 520 with an OAM flag set (or other OAM indication),as described above. Additionally, in step 525, the indication that theecho packet is for overlay path validation (e.g., an “N” flag) may beset, and the message type may be set as a generic echo request (e.g.,value X) in step 530. To finalize the echo packet 300, in step 535 theingress NVE may also include a target-context-ID as the desired VNContext and associated details in a TLV (MAC or IP), and other detailsas required by the underlying protocol may be populated in step 540.

In step 545, the ingress NVE may then send the echo packet toward theegress NVE, such that the egress NVE (e.g., NVE2), upon receiving thesame, will understand it is an OAM message (e.g., due to the presence ofOAM-OPTION Destination Header) and further looks into the payload 320 toretrieve the VN Context ID and associated details for validation.(Notably, the egress NVE may understand it is an OAM messagealternatively due to a “Next Header” as in RFC 3503, further lookinginto the global flag (N flag) to understand it is a non-LSP-Pingmessage, which helps interpret the payload as context ID TLVs (newTLVs/Sub-TLVs)). As such, in step 550, the egress NVE may send an echoreply according to the validation of the VN context information, and theprocedure 500 ends in step 555.

As a second example use, FIG. 6 illustrates an example of an ECMP treetrace (ECMP-traceroute), where each arrowhead on a request 410 solicitsa response by a receiving intermediate device due to an incremental hoplimit being reached (as per conventional traceroute techniques that willbe understood by those skilled in the art). In order to effectivelyfunction in an ECMP overlay environment, the techniques herein, withreference particularly to procedure 700 of FIG. 7, provide the keycomponents to allow such functionality. In particular, in addition tosteps 510 through 540 in procedure 500 above, procedure 700 starts atstep 705 and continues to step 710 where a hop limit value is started as“1” for the echo packet. By including multipath information 326 withinthe echo packet in step 715 (shown in FIG. 3 above), sending the echopacket toward the egress NVE in step 720 (e.g., sending a plurality ofecho packets with incrementally increasing hop limits) causes eachintermediate multipath receiver (e.g., R1) to reply with a respectiveflow label and mask for each egress interface of that multipath receiverin step 725 (e.g., after performing an appropriate multipath algorithm).For example, R1 may receive the echo request 410 with MultipathInformation, and will reply with a respective label and mask for eachegress interface (one towards R2 and another towards R3).

Notably, multipath information 326 may generally depend upon types ofvalidation being performed, such as being a DDMAP with a newly defined“Bit-masked IPv6 Flow Label” type (or a “range” as opposed to abit-mask). Additional extensions can be used for other types ofvalidation as well as other sources of entropy for ECMP—for example,using a “Bit-masked generic route encapsulation (GRE) Key” or“Bit-masked Source UDP Port” as multipath types for other ECMPtreetraces.

Until the traceroute reaches the egress NVE in step 730, the ingressNVE1 will continue the procedure until it reaches NVE2 (the egress NVE),thus performing the ECMP Tree Trace between NVEs (i.e., by incrementingthe hop limit in step 735, and returning to step 720 to send asubsequent packet, accordingly). Once the Initiator NVE (ingress NVE)reaches the egress NVE in step 730, and is done with identifying theFlow Label value for each path (ECMP Tree trace), the ingress NVE maysend the generic echo request (e.g., with Hop Limit as 255) and arespective Flow Label in the Header in step 740 to validate all possiblepaths between the source and destination NVEs. In other words, inresponse to reaching the egress NVE with the echo packet, the ingressNVE may send an echo packet toward the egress NVE on all availablemultipath paths using a corresponding flow label to cause the egress NVEto send an echo reply to the ingress NVE according to validation of theVN context information for each multipath path. The illustrativeprocedure 700 may then end in step 745.

Generally, FIG. 8 illustrates an example simplified procedure 800 forpath-ping and ECMP-traceroute for IPv6 overlay virtualized networks inaccordance with one or more embodiments described herein. The procedure800 may start at step 805, and continues to step 810, where, asdescribed in greater detail above, an ingress NVE generates an echopacket 300. Within that echo packet, in step 815 an indication may beset that the echo packet is for overlay path validation, and in step 820a message type of the echo packet may be set to a generic echo request.In addition, in step 825, the ingress NVE includes VN contextinformation within the echo packet, and set a source address of the echopacket as the ingress NVE address in step 830. Furthermore, in step 835,the destination address of the echo packet is set as an egress NVEaddress and including an indication to the egress NVE that the echopacket is an OAM message. Optionally, as described above, forECMP-traceroute, in step 840 the ingress NVE may include multipathinformation within the echo packet to cause each intermediate multipathreceiver to reply with a respective flow label and mask for each egressinterface of that multipath receiver. Once the echo packet isconfigured, in step 845 the ingress NVE sends the packet toward theegress NVE, for example, directly to the NVE for validation, or withincrementing hop limits and then to the egress NVE on all paths oncerevealed. The illustrative procedure 800 ends in step 850.

It should be noted that while certain steps within procedures 500, 700,and 800 may be optional as described above, the steps shown in FIGS. 5,7, and 8 are merely examples for illustration, and certain other stepsmay be included or excluded as desired.

Further, while a particular order of the steps is shown, this orderingis merely illustrative, and any suitable arrangement of the steps may beutilized without departing from the scope of the embodiments herein.Moreover, while procedures 500, 700, and 800 are described separately,certain steps from each procedure may be incorporated into each otherprocedure, and the procedures are not meant to be mutually exclusive.

The techniques described herein, therefore, provide for path-ping andECMP-traceroute for IPv6 overlay virtualized networks. In particular,the techniques herein provide an OAM solution for NVO3 scenarios, whichincludes ECMP treetrace for NVO3 and NV context validation.Additionally, the echo packets described above are easy to implement,and are scalable and extendable for future use cases, preventing thenecessity of performing brute force ICMP ping processes, as mentionedabove.

While there have been shown and described illustrative embodiments thatprovide for path-ping and ECMP-traceroute for IPv6 overlay virtualizednetworks, it is to be understood that various other adaptations andmodifications may be made within the spirit and scope of the embodimentsherein. For example, the embodiments have been shown and describedherein with relation to NVO3 networks in particular. However, theembodiments in their broader sense are not as limited, and may, in fact,be used with other types of IP-based overlay networks. In addition,while certain protocols are shown, such as MPLS, and particularly MPLSLSP-Ping as an underlying echo packet structure, other suitableprotocols may be used, accordingly.

The foregoing description has been directed to specific embodiments. Itwill be apparent, however, that other variations and modifications maybe made to the described embodiments, with the attainment of some or allof their advantages. For instance, it is expressly contemplated that thecomponents and/or elements described herein can be implemented assoftware being stored on a tangible (non-transitory) computer-readablemedium (e.g., disks/CDs/RAM/EEPROM/etc.) having program instructionsexecuting on a computer, hardware, firmware, or a combination thereof.Accordingly this description is to be taken only by way of example andnot to otherwise limit the scope of the embodiments herein. Therefore,it is the object of the appended claims to cover all such variations andmodifications as come within the true spirit and scope of theembodiments herein.

What is claimed is:
 1. A method, comprising: generating an echo packetby an ingress network virtualization edge (NVE) in a computer network;setting an indication in the echo packet that the echo packet is foroverlay path validation; setting a message type of the echo packet to ageneric echo request; including virtualization network (VN) contextinformation within the echo packet; setting a destination address of theecho packet as an egress NVE address and including an indication to theegress NVE that the echo packet is an operations, administration, andmanagement (OAM) message; and sending the echo packet toward the egressNVE.
 2. The method as in claim 1, wherein sending the echo packet towardthe egress NVE is to cause the egress NVE to send an echo reply to theingress NVE according to validation of the VN context information. 3.The method as in claim 1, further comprising: including multipathinformation within the echo packet to cause each intermediate multipathreceiver to reply with a respective flow label and mask for each egressinterface of that multipath receiver; and wherein sending the echopacket toward the egress NVE comprises sending a plurality of echopackets with incrementally increasing hop limits.
 4. The method as inclaim 3, further comprising: in response to reaching the egress NVE withthe echo packet, sending an echo packet toward the egress NVE on allavailable multipath paths using a corresponding flow label to cause theegress NVE to send an echo reply to the ingress NVE according tovalidation of the VN context information for each multipath path.
 5. Themethod as in claim 3, wherein the multipath information is selected froma group consisting of: an IPv6 flow label; a generic route encapsulation(GRE) key; and a source user datagram protocol (UDP) port.
 6. The methodas in claim 5, wherein the multipath information comprises a bit-mask.7. The method as in claim 1, wherein including the indication to theegress NVE that the echo packet is an OAM message comprises a specificuser datagram protocol (UDP) port and destination port.
 8. The method asin claim 1, wherein including the indication to the egress NVE that theecho packet is an OAM message comprises an explicit indication.
 9. Themethod as in claim 8, wherein the explicit indication comprises anOAM-option destination header option with a particular flag set.
 10. Themethod as in claim 1, wherein the VN context information comprises a VNcontext identifier (ID) and associated VN context details.
 11. Themethod as in claim 1, wherein the VN context information is includedwithin a type-length-value (TLV) field of the echo packet.
 12. Themethod as in claim 1, wherein the indication in the echo packet that theecho packet is for overlay path validation comprises a particular flagset within a global flags field of the echo packet.
 13. An apparatus,comprising: one or more network interfaces to communicate as an ingressnetwork virtualization edge (NVE) in a computer network; a processorcoupled to the network interfaces and adapted to execute one or moreprocesses; and a memory configured to store a process executable by theprocessor, the process when executed operable to: generate an echopacket; set an indication in the echo packet that the echo packet is foroverlay path validation; set a message type of the echo packet to ageneric echo request; include virtualization network (VN) contextinformation within the echo packet; set a destination address of theecho packet as an egress NVE address and including an indication to theegress NVE that the echo packet is an operations, administration, andmanagement (OAM) message; and send the echo packet toward the egressNVE.
 14. The apparatus as in claim 13, wherein sending the echo packettoward the egress NVE is to cause the egress NVE to send an echo replyto the ingress NVE according to validation of the VN contextinformation.
 15. The apparatus as in claim 13, wherein the process whenexecuted is further operable to: include multipath information withinthe echo packet to cause each intermediate multipath receiver to replywith a respective flow label and mask for each egress interface of thatmultipath receiver; and send a plurality of echo packets toward theegress NVE with incrementally increasing hop limits.
 16. The apparatusas in claim 15, wherein the process when executed is further operableto: in response to reaching the egress NVE with the echo packet, send anecho packet toward the egress NVE on all available multipath paths usinga corresponding flow label to cause the egress NVE to send an echo replyto the ingress NVE according to validation of the VN context informationfor each multipath path.
 17. The apparatus as in claim 15, wherein themultipath information is selected from a group consisting of: an IPv6flow label; a generic route encapsulation (GRE) key; and a source userdatagram protocol (UDP) port.
 18. The apparatus as in claim 13, whereinincluding the indication to the egress NVE that the echo packet is anOAM message comprises one of either a specific user datagram protocol(UDP) port and destination port or an explicit indication.
 19. Theapparatus as in claim 13, wherein the VN context information comprises aVN context identifier (ID) and associated VN context details.
 20. Atangible, non-transitory, computer-readable media having softwareencoded thereon, the software, when executed by a processor on aningress network virtualization edge (NVE) in a computer network,operable to: generate an echo packet; set an indication in the echopacket that the echo packet is for overlay path validation; set amessage type of the echo packet to a generic echo request; includevirtualization network (VN) context information within the echo packet;set a destination address of the echo packet as an egress NVE addressand including an indication to the egress NVE that the echo packet is anoperations, administration, and management (OAM) message; and send theecho packet toward the egress NVE.
 21. The computer-readable media as inclaim 20, wherein sending the echo packet toward the egress NVE is tocause the egress NVE to send an echo reply to the ingress NVE accordingto validation of the VN context information.
 22. The computer-readablemedia as in claim 20, wherein the software when executed is furtheroperable to: include multipath information within the echo packet tocause each intermediate multipath receiver to reply with a respectiveflow label and mask for each egress interface of that multipathreceiver; and send a plurality of echo packets toward the egress NVEwith incrementally increasing hop limits.
 23. The computer-readablemedia as in claim 20, wherein the software when executed is furtheroperable to: in response to reaching the egress NVE with the echopacket, send an echo packet toward the egress NVE on all availablemultipath paths using a corresponding flow label to cause the egress NVEto send an echo reply to the ingress NVE according to validation of theVN context information for each multipath path.